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RESPONSE 

Claims Status 

Claims 1-21 were originally filed in this application. A restriction requirement was 
issued on February 7, 2005, and in a response thereto, Applicant elected to pursue claims 1-18 
in this application. An office action was issued on September 19, 2005, rejecting claims 1-18, 
and Applicant filed a response thereto on December 7, 2005, in which claims 1-4, 9,11,16 
and 18 were amended. A final office action was issued on January 27, 2006, maintaining the 
objections of the previous action, and Applicant filed a response thereto on March 21, 2006, in 
which claims 1 - 4, 1 1 and 18 were amended. The response was entered into the record on April 
19, 2006, in conjunction with a Request for Continued Examination. An office action was issued 
on May 23, 2006, and included new grounds for rejections of claims 1-18. In this current 
Amendment and Response, Applicant has amended claims 1 - 4, 1 1, 15 and 18. Support for the 
amendments can be found throughout the originally filed specification and claims, and, for 
example, at paragraphs [0050] - [0054] of the application as published. No new matter has been 
added. 

Claim Rejections 

In the current action, claims 1-18 were rejected under 35 U.S.C. § 103(a) as allegedly 
being unpatentably obvious in view of U.S. Patent Serial No. 6,233,577 to Ramasubramani et al. 
("Ramasubramani") and in further view of U.S. Patent Serial No. 6,161,139 to Win et al. 
("Win"). 

Applicant respectfully submits that the claims as amended are patentable over the cited 
references. 

Ramasubramani 

Ramasubramani is directed generally to a centralized certificate management proxy server 
useful for mobile devices. The proxy server facilitates "obtaining certificates asynchronously, 
apart from the tradition of obtaining certificates in local devices that normally have sufficient 
computing power." Col. 7, line 63 - 66. The Ramasubramani proxy server stores certificates in 
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a table at the proxy server so that a mobile device can make use of the certificates via the proxy 
server even if it lacks sufficient processing power to do so. 

Each Ramasubramani mobile device "has its own unique device ID that corresponds to a 
subscriber ID." Col. 7 lines 1-5. The user's account on the proxy server is "indexed by the 
device ID or the subscriber ID and identified by an address identifier such as a URL" and 
"comprises] user info, a certificate list, and a private key list." Col. 7 lines 10-14. 

A user can use a PC (not the mobile device) to access the user's account on the proxy 
server: "the user may use the PC which has preferably a sufficient computing power and 
equipped with a more familiar HTML browser to establish a communication session using HTTP 
and the URL to the account." . Col. 8 lines 54-57. When accessing his account from a PC, the 
user employs a username and password: "If the entered username and password are matched, the 
authorization is granted so that the user or (sic) the PC is permitted to access the account. Col. 8 
lines 63-65. 

Win 

Win is directed generally to role-based authentication services for administrative 
functions within web-based applications. To perform a given function, a user logs into a registry 
server using a user ID and a password, and the registry server authenticates the user. Col. 9 lines 
25-35. An authentication service then retrieves user profile information based on the roles 
attributed to the user and application privileges associated with the roles. Col. 10 lines 29-33. 
The authentication service "creates a 'user cookie 5 and a 'roles cookie' which are used to convey 
profile information to [a] browser. Col. 10 lines 36-38. 

Claims 1-18 

As amended, independent claims 1 , 2 and 3 each recite in part, locating "session context 
information based on [a] device identifier" that was "associated with the device identifier during 
a previous wireless session," locating "access privileges" and authorizing "a current session 
between the device and the resource based on the located access privileges and the session 
context information." Similarly, as amended, independent claims 4 and 1 1 each recite, in part, 
"locating session context information associated with [a] device identifier, the session context 
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information associated with a previous wireless session between the device and the resource and 
including access privileges associated with a cluster of users" and "providing the session context 
information for use in a current session between the device and the resource." Likewise, as 
amended, independent claim 1 8 recites in part, "computer program instructions" that "cause a 
digital processor to" "locate . . . session context information associated with [a] device identifier, 
the session context information associated with a previous wireless session between the device 
and the resource" and "providing the session context information for use in a current session 
between the device and the resource." 

As described above, Ramasubramani describes a system in which users use a personal 
computer (PC) to access subscriber account information that can be later used from a mobile 
device to access web sites. In contrast, Applicants claim "session context information" that was 
"associated with" or "assigned to [a] device during a previous wireless session" to authorize or 
for use in "a current session between the device and the resource." By maintaining session 
context information for individual connections (such as storing an IP address attributed to a 
particular device ID at a gateway server, for example) and making that context information 
available to devices in subsequent sessions, a user can move a mobile device among numerous 
access points without requiring re-registration to the network. As described above, 
Ramasubramani maintains user and site-specific digital certificates, not session context 
information. 

The Office Action apparently considers the digital certificates of the Ramasubramani 
system to suggest the session context information used by Applicant's system. Office Action, pg. 
5. The digital certificates of Ramasubramani, however, are provisioned on a proxy server (not a 
wireless device) and associated with user accounts (not sessions) by a certificate management 
module ("CMM"). In fact, Ramasubramani states that "the CMM assigns the certificates to the 
particular account by attaching the device ID and other account information, hence the fetched 
certificates become associated to the particular account and are placed in the certificate list." 
Col. 7 lines 47-51. Furthermore, the allocation of certificates from unsupported certificate 
authorities requires that the user "log onto the user account associated with the mobile device 
though any computers, for example, a PC coupled in the landnet." Col. 8 lines 15-17. Whereas 
Ramasubramani associates the digital certificates with user's accounts via a separate device (a 
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PC), the claims recite using session context information that was associated with the device 
during a previous wireless session. This alleviates the need for re-authentication and the 
provisioning of new network context information when users roam among wireless access points. 

Win does not cure this deficiency of Ramasubramani. Win provides role-based 
application privileges to browser users via cookie files. Win makes no mention of re-using 
session-based context information, let alone providing authentication to users of wireless 
networks. 

As such, Applicant respectfully submits that independent claims 1-4, 1 1 and 18, as well 
as those claims that depend therefrom, are patentable over the cited references. 
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CONCLUSION 



Applicant respectfully requests that the Examiner reconsider the application and claims in 
light of this Response, and respectfully submit that the claims are in condition for allowance. If 
the Examiner believes, in his review of this Response or after further examination, a telephonic 
interview would expedite the favorable prosecution of the present application, the Applicant's 
attorney would welcome the opportunity to discuss any outstanding issues, and to work with the 
Examiner toward placing the application in condition for allowance. 



Respectfully submitted, 
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